{
  "permissions": {
    "allow": [
      "Bash(git status)",
      "Bash(git *)",
      "Bash(npm run *)"
    ],
    "deny": [
      "Bash(git push *)"
    ]
  },
  "sandbox": {
    "enabled": true,
    "excludedCommands": [
      "docker *"
    ]
  }
}